Network and Security
Remotle: Network Requirements
This page lists the network access Remotle needs. It is for IT teams setting firewall, proxy and web-filter rules.
| Protocol | Port | Direction | Purpose |
|---|---|---|---|
| TCP | 443 | Outbound | Sign-in, workstation list, updates, logs |
| TCP | 9443 | Outbound | Connection set-up |
| UDP | 4443 | Outbound | Session traffic through a Computle relay |
| UDP | 3478 | Outbound | Network address discovery (STUN) |
| UDP | Any high port | Outbound | Direct session traffic between your device and your workstation, when the network allows it |
Domains
Section titled “Domains”Allow these from user devices:
| Domain | Port | Purpose |
|---|---|---|
auth.computle.com | TCP 443 | Sign-in |
asmgr.computle.com | TCP 443 | Workstation list and connection authorisation |
portal.computle.com | TCP 443 | Portal, problem reports |
updates.computle.com | TCP 443 | Updates |
softwaredownloads.oncomputle.com | TCP 443 | Installers and release notes |
logs.svc.broker.computle.com | TCP 443 | Logs |
login.microsoftonline.com, login.microsoft.com, graph.microsoft.com | TCP 443 | Microsoft sign-in |
Allow these from workstations:
| Domain | Port | Purpose |
|---|---|---|
updates.computle.com | TCP 443 | Updates |
*.r2.cloudflarestorage.com, storage.googleapis.com, *.blob.core.windows.net | TCP 443 | Update downloads and update verification |
keygen.computle.com | TCP 443 | Licence check |
*.id.computle.net | TCP 443 | Workstation identity and Single Sign-On |
logs.svc.broker.computle.com | TCP 443 | Logs |
Connection services
Section titled “Connection services”User devices and workstations both connect to these.
Connection set-up
| Host name | Address | Port |
|---|---|---|
rdv-ths-1.prod.computle.com | 91.198.40.247 | TCP 443 and 9443 |
rdv-uka-1.prod.computle.com | 194.4.152.76 | TCP 443 and 9443 |
Relays
| Host name | Address | Port |
|---|---|---|
relay-ths-1.svc.broker.computle.com | 91.198.40.50 | UDP 4443 |
relay-uka-1.svc.broker.computle.com | 194.4.152.50 | UDP 4443 |
relay-uka-2.svc.broker.computle.com | 194.4.152.51 | UDP 4443 |
relay-ukb-1.svc.broker.computle.com | 151.243.39.160 | UDP 4443 |
relay-ukb-2.svc.broker.computle.com | 151.243.39.161 | UDP 4443 |
Network address discovery
| Host name | Port |
|---|---|
stun.cloudflare.com | UDP 3478 |
Rules written against host names keep working when Computle adds a relay under *.svc.broker.computle.com. Rules written against addresses need updating when this page changes.
Proxies and TLS inspection
Section titled “Proxies and TLS inspection”| Traffic | Proxy | TLS inspection |
|---|---|---|
| Sign-in, updates and problem reports | Uses the system proxy | |
| Connection set-up | No proxy. Allow it directly. | Works if the inspecting certificate is trusted by the device. |
| Session traffic | No proxy. Allow it directly. | Encrypted end to end and cannot be inspected. |
Workstation traffic to updates.computle.com, *.id.computle.net and *.svc.broker.computle.com | Uses certificate authentication and must be excluded from TLS inspection. |
Bandwidth
Section titled “Bandwidth”Remotle adjusts the picture to the connection. As a guide, at full quality each screen uses up to:
| Resolution | Bitrate |
|---|---|
| 1920 x 1080 | 25 Mbps |
| 2560 x 1440 | 40 Mbps |
| 3840 x 2160 | 80 Mbps |
On a slower connection, choose the Smooth preset in the session menu. Smooth is designed for connections under 5 Mbps.
Testing
Section titled “Testing”On a Windows, Mac or Linux device, open Settings, Diagnostics and click Run Test. Remotle checks every service this device needs and groups the results under This device, Services, Rendezvous, Relays and STUN / Your network. See Diagnostics.